Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/37a1de08-84b7-4f3b-a398-3d5b1bdda8bd.roa
File:                     37a1de08-84b7-4f3b-a398-3d5b1bdda8bd.roa (raw, json)
Hash identifier:          eBVH0FPx5T1eAiMey1vs8dllU2bm95v15n1k6IsLMAY=
Subject key identifier:   43:BC:23:4B:7F:F0:B8:4B:6D:3D:45:8C:81:04:38:4D:7E:83:8D:5A
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       60A646A229526384F9BABCB58D4CE38B52AED776
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/37a1de08-84b7-4f3b-a398-3d5b1bdda8bd.roa
Signing time:             Thu 23 Jul 2026 10:31:18 +0000
ROA not before:           Thu 23 Jul 2026 10:31:18 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3478::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a6:46:a2:29:52:63:84:f9:ba:bc:b5:8d:4c:e3:8b:52:ae:d7:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 10:31:18 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=909a76e747d62e2613ff76e3b9cc9c154544bc70c9d26afe60c68fc3d2231e82, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ee:8a:5d:2e:77:15:56:c2:e4:63:c6:32:32:
                    0e:38:89:15:ac:ed:20:f9:4a:12:27:67:c0:f2:7d:
                    ee:4a:93:58:74:bc:34:66:6c:a4:dc:22:e4:1e:98:
                    96:06:6e:23:fa:cf:35:58:c1:0b:25:38:27:41:d6:
                    74:1b:12:b4:2e:28:0a:4c:ca:66:13:a6:2b:d1:4f:
                    45:38:70:51:06:63:c8:b7:11:ed:3a:64:72:97:5a:
                    ed:5e:14:2b:65:c8:26:3f:9e:47:57:61:c2:8c:c0:
                    fc:2d:ac:2a:87:7e:26:78:98:9a:5e:8a:b7:35:b5:
                    a8:af:5a:f4:8a:0c:d2:a4:5e:27:02:1c:0b:da:2c:
                    5c:b5:49:51:62:86:da:b0:1c:86:33:ae:bb:46:7b:
                    cd:98:89:73:d7:ba:16:87:09:a7:81:76:05:d3:a9:
                    1a:a5:ef:a7:e6:a6:57:00:e0:30:f4:e1:af:05:6d:
                    b2:76:49:61:90:11:50:de:a8:90:3a:42:bd:ec:7a:
                    9a:b0:ff:a1:4d:0d:fe:44:ce:eb:3f:ca:4f:00:f4:
                    7e:25:15:84:d8:53:6e:22:4a:3a:4a:60:a4:c3:25:
                    1c:fe:35:4b:aa:39:0a:cc:ae:fc:fc:3f:60:4f:ba:
                    1f:36:2c:fb:dd:6e:dd:ba:92:a7:1c:4d:0e:bd:87:
                    3e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:BC:23:4B:7F:F0:B8:4B:6D:3D:45:8C:81:04:38:4D:7E:83:8D:5A
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/37a1de08-84b7-4f3b-a398-3d5b1bdda8bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3478::/47

    Signature Algorithm: sha256WithRSAEncryption
         ad:d8:11:cb:87:c9:8a:8f:63:18:75:35:60:ba:01:3f:89:d1:
         5f:16:6b:5c:1c:d5:7b:30:68:c8:08:c8:2d:9c:68:d0:75:40:
         85:f2:a4:99:b6:d0:b7:0f:71:a9:03:28:60:30:a1:6a:13:a7:
         46:95:4f:9d:28:79:34:9f:4c:2d:38:5c:c2:fb:98:88:b2:cf:
         34:a7:da:16:76:8c:1d:a2:34:8f:fc:ea:3c:55:9f:26:2f:b0:
         0d:08:bd:a7:ca:4b:e3:13:00:d2:02:94:45:45:5c:50:ca:76:
         e4:ac:3c:ab:40:33:37:43:8c:2c:04:e5:19:08:69:d0:f1:45:
         40:f4:03:9d:09:f6:c6:6a:a6:dc:7b:96:eb:fe:73:b9:5d:52:
         2f:e5:51:d2:03:07:e0:53:7c:ad:af:32:1b:d3:d9:94:9f:32:
         7b:f6:42:18:08:bc:35:04:b1:bd:94:8b:ff:90:67:e7:8a:0b:
         8b:50:e8:4f:cb:fc:ea:35:d6:75:87:34:f9:2d:b7:f3:10:6a:
         12:b4:43:18:65:bc:69:a3:56:f0:ea:e9:29:f0:c3:15:7c:6e:
         f6:ba:65:1e:85:6d:bc:6e:f8:9d:f9:ff:50:26:4e:a3:8b:b4:
         ae:a1:26:aa:76:38:cb:d6:33:e4:40:b6:21:89:bd:ec:cb:ea:
         0b:d1:fa:57
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:01:34 2026 by rpki-client